mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2024-11-22 07:30:19 +00:00
72231b405a
This new Kernel StdLib function will be used to copy contents of a FixedStringBuffer with a null character to a user process. The first user of this new function is the prctl option of PR_GET_PROCESS_NAME which would copy a process name including a null character to a user provided buffer.
121 lines
4.4 KiB
C++
121 lines
4.4 KiB
C++
/*
|
|
* Copyright (c) 2023, Liav A. <liavalb@hotmail.co.il>
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <AK/Array.h>
|
|
#include <AK/StringBuilder.h>
|
|
#include <AK/StringView.h>
|
|
#include <AK/TypedTransfer.h>
|
|
#include <AK/Userspace.h>
|
|
|
|
#ifdef KERNEL
|
|
# include <Kernel/Arch/SafeMem.h>
|
|
# include <Kernel/Arch/SmapDisabler.h>
|
|
# include <Kernel/Memory/MemorySections.h>
|
|
#endif
|
|
|
|
namespace AK {
|
|
|
|
template<size_t Size>
|
|
class FixedStringBuffer {
|
|
public:
|
|
[[nodiscard]] static ErrorOr<FixedStringBuffer<Size>> vformatted(StringView fmtstr, AK::TypeErasedFormatParams& params)
|
|
requires(Size < StringBuilder::inline_capacity)
|
|
{
|
|
StringBuilder builder { StringBuilder::UseInlineCapacityOnly::Yes };
|
|
TRY(AK::vformat(builder, fmtstr, params));
|
|
FixedStringBuffer<Size> buffer {};
|
|
buffer.store_characters(builder.string_view());
|
|
return buffer;
|
|
}
|
|
|
|
template<typename... Parameters>
|
|
[[nodiscard]] static ErrorOr<FixedStringBuffer<Size>> formatted(CheckedFormatString<Parameters...>&& fmtstr, Parameters const&... parameters)
|
|
requires(Size < StringBuilder::inline_capacity)
|
|
{
|
|
AK::VariadicFormatParams<AK::AllowDebugOnlyFormatters::No, Parameters...> variadic_format_parameters { parameters... };
|
|
return vformatted(fmtstr.view(), variadic_format_parameters);
|
|
}
|
|
|
|
void store_characters(StringView characters)
|
|
{
|
|
// NOTE: Only store the characters up to the first null terminator
|
|
// because we don't care about any further characters.
|
|
// This matches some expected behavior in the Kernel code, because
|
|
// technically userspace programs could send a syscall argument with
|
|
// multiple null terminators - we only care about the *first* chunk up to
|
|
// the first null terminator, if present at all.
|
|
size_t stored_length = 0;
|
|
for (; stored_length < min(Size, characters.length()); stored_length++) {
|
|
if (characters[stored_length] == '\0')
|
|
break;
|
|
m_storage[stored_length] = characters[stored_length];
|
|
}
|
|
m_stored_length = stored_length;
|
|
// NOTE: Fill the rest of the array bytes with zeroes, just to be
|
|
// on the safe side.
|
|
// Technically, it means that a sent StringView could occupy the
|
|
// entire storage without any null terminators and that's OK as well.
|
|
for (size_t index = m_stored_length; index < Size; index++)
|
|
m_storage[index] = '\0';
|
|
}
|
|
|
|
#ifdef KERNEL
|
|
ErrorOr<void> copy_characters_from_user(Userspace<char const*> user_str, size_t user_str_size)
|
|
{
|
|
if (user_str_size > Size)
|
|
return EFAULT;
|
|
bool is_user = Kernel::Memory::is_user_range(user_str.vaddr(), user_str_size);
|
|
if (!is_user)
|
|
return EFAULT;
|
|
Kernel::SmapDisabler disabler;
|
|
void* fault_at;
|
|
ssize_t length = Kernel::safe_strnlen(user_str.unsafe_userspace_ptr(), user_str_size, fault_at);
|
|
if (length < 0) {
|
|
dbgln("FixedStringBuffer::copy_characters_into_storage({:p}, {}) failed at {} (strnlen)", static_cast<void const*>(user_str.unsafe_userspace_ptr()), user_str_size, VirtualAddress { fault_at });
|
|
return EFAULT;
|
|
}
|
|
if (!Kernel::safe_memcpy(m_storage.data(), user_str.unsafe_userspace_ptr(), (size_t)length, fault_at)) {
|
|
dbgln("FixedStringBuffer::copy_characters_into_storage({:p}, {}) failed at {} (memcpy)", static_cast<void const*>(user_str.unsafe_userspace_ptr()), user_str_size, VirtualAddress { fault_at });
|
|
return EFAULT;
|
|
}
|
|
m_stored_length = (size_t)length;
|
|
for (size_t index = m_stored_length; index < Size; index++)
|
|
m_storage[index] = '\0';
|
|
return {};
|
|
}
|
|
#endif
|
|
|
|
Span<u8> storage()
|
|
{
|
|
return m_storage.span();
|
|
}
|
|
StringView representable_view() const { return StringView(m_storage.data(), m_stored_length); }
|
|
Span<u8 const> span_view_ensuring_ending_null_char()
|
|
{
|
|
VERIFY(m_stored_length + 1 <= Size);
|
|
m_storage[m_stored_length] = '\0';
|
|
return Span<u8 const>(m_storage.data(), m_stored_length + 1);
|
|
}
|
|
|
|
size_t stored_length() const { return m_stored_length; }
|
|
|
|
FixedStringBuffer()
|
|
{
|
|
m_storage.fill(0);
|
|
}
|
|
|
|
private:
|
|
Array<u8, Size> m_storage;
|
|
size_t m_stored_length { 0 };
|
|
};
|
|
|
|
}
|
|
|
|
#if USING_AK_GLOBALLY
|
|
using AK::FixedStringBuffer;
|
|
#endif
|